Ele também identifica aplicativos baseados non-ascii. Isto é conseguido através do envio de pacotes de gatilho, e olhando para cima as respostas em uma lista de strings de resposta.
root@kali:~# amap -bqv 192.168.1.15 80
Using trigger file /etc/amap/appdefs.trig ... loaded 30 triggers
Using response file /etc/amap/appdefs.resp ... loaded 346 responses
Using trigger file /etc/amap/appdefs.rpc ... loaded 450 triggers
amap v5.4 (www.thc.org/thc-amap) started at 2014-05-13 19:07:16 - APPLICATION MAPPING mode
Total amount of tasks to perform in plain connect mode: 23
Protocol
on 192.168.1.15:80/tcp (by trigger ssl) matches http - banner:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML
2.0//EN">\n<html><head>\n<title>501 Method Not
Implemented</title>\n</head><body>\n<h1>Method
Not Implemented</h1>\n<p> to /index.html not
supported.<br
/>\n</p>\n<hr>\n<address>Apache/2.2.22 (Debian)
Server at 12
Protocol
on 192.168.1.15:80/tcp (by trigger ssl) matches http-apache-2 - banner:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML
2.0//EN">\n<html><head>\n<title>501 Method Not
Implemented</title>\n</head><body>\n<h1>Method
Not Implemented</h1>\n<p> to /index.html not
supported.<br
/>\n</p>\n<hr>\n<address>Apache/2.2.22 (Debian)
Server at 12
Waiting for timeout on 19 connections ...
amap v5.4 finished at 2014-05-13 19:07:22
